Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2efbf25b-f73f-33e6-8aa5-7bc21e35b78b.roa
File:                     2efbf25b-f73f-33e6-8aa5-7bc21e35b78b.roa (raw, json)
Hash identifier:          3GdGZ6qcT7vi8izJ6oxlgXExLLvRqYnEtCCPwROGqFs=
Subject key identifier:   75:DF:6D:C7:03:F2:B5:E8:4A:9C:7A:AF:01:DE:EB:60:8E:42:07:BE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1707B785C0233FC748882600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2efbf25b-f73f-33e6-8aa5-7bc21e35b78b.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     834
IP address blocks:        142.252.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:b7:85:c0:23:3f:c7:48:88:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=2c8c3542-66d1-4df4-819a-819264dee882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:23:11:af:47:88:92:38:98:f2:bb:9a:8f:
                    c5:81:17:20:b1:ed:39:23:93:f4:c1:f6:00:2f:bd:
                    95:f9:9a:62:01:94:94:aa:2f:b4:60:bb:38:db:ce:
                    f7:41:86:41:81:a8:be:60:a4:9c:15:e5:70:8b:1b:
                    52:36:b4:ad:38:3c:c4:19:0e:97:8b:33:b3:67:44:
                    7f:be:ba:0b:d7:52:c2:63:b4:14:b3:22:9c:ff:0b:
                    ec:2a:62:96:a8:f2:e5:16:84:69:ae:b5:11:6d:57:
                    1c:6b:7c:7a:03:23:23:dc:08:3e:19:c8:3a:8f:d0:
                    3d:a0:42:bc:00:0a:77:22:a9:79:2f:0f:59:b0:86:
                    8e:56:18:25:cb:1e:ae:8a:d5:57:03:0a:4b:9c:45:
                    fa:d6:30:7d:9b:92:4a:61:33:6f:f5:c6:6f:5a:ea:
                    19:5d:b0:73:3f:91:b0:c3:81:b0:4f:aa:b3:b2:cf:
                    79:11:fa:cc:74:46:90:89:d2:aa:30:42:3a:70:67:
                    df:b7:41:0f:d5:83:7e:22:e9:a0:1d:b0:7f:b7:cf:
                    ac:0a:28:26:60:2e:7b:29:1c:4a:6a:d1:99:7e:a4:
                    7c:bb:8a:7f:cd:28:8e:91:31:93:3f:be:61:c7:eb:
                    92:18:c7:1e:cc:4c:6b:43:c5:79:78:f2:f7:98:92:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DF:6D:C7:03:F2:B5:E8:4A:9C:7A:AF:01:DE:EB:60:8E:42:07:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2efbf25b-f73f-33e6-8aa5-7bc21e35b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:9d:c1:60:48:48:81:19:66:de:f3:38:e4:b1:40:9b:3b:
         14:81:8e:96:41:99:4a:ae:8c:05:af:a5:0b:9a:2c:92:36:16:
         b1:54:fc:71:80:c4:c1:b1:76:2d:98:e2:0b:a7:06:7b:6b:ce:
         0b:55:fb:68:5e:3b:1b:50:24:db:6c:9d:bb:5f:7e:05:d2:bc:
         e0:ca:c7:4e:75:99:4d:cd:d7:d6:e4:b0:32:56:8e:fb:77:a3:
         e0:d5:f4:41:67:47:d3:05:ea:40:39:c7:b4:6a:b8:8e:ec:e1:
         09:31:10:1c:80:4a:d1:ac:bb:eb:c2:8f:10:0c:18:a5:04:bd:
         1f:8c:fb:01:ea:43:bd:5d:a6:33:36:5f:9a:9d:54:a4:4a:92:
         e7:ae:32:ab:3e:83:e6:90:a6:95:e8:fc:ec:73:02:2d:df:15:
         94:a8:e7:e6:80:67:6c:05:c8:6a:e5:c9:db:94:3f:81:f7:b8:
         47:79:62:15:66:c3:da:5e:ab:e5:20:aa:16:9f:bd:9f:90:93:
         57:f6:c9:c3:88:6a:94:71:9e:bf:75:25:62:73:25:26:48:a2:
         36:cf:63:df:4f:e2:bc:6a:c2:6f:ed:64:9c:ba:98:0e:3a:06:
         b6:2d:3e:bf:44:c0:12:5d:98:49:02:01:49:74:91:3a:74:3d:
         94:64:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:20 2026 by rpki-client